Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa
File:                     c3c1377b-15a9-4918-8ac4-4abafd31046f.roa (raw, json)
Hash identifier:          0OWdxKnpkdzdzGmExzDZUYoaSNBreDSKAkIJYSzxVbU=
Subject key identifier:   D7:6F:7B:C1:BE:20:F4:9F:1C:E0:A8:FB:AB:68:B3:BC:00:2B:52:7C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3308BACA3BEBF6B534ACABFEB88A6C37C60CEE39
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa
Signing time:             Fri 31 Oct 2025 01:30:09 +0000
ROA not before:           Fri 31 Oct 2025 01:30:09 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:08:ba:ca:3b:eb:f6:b5:34:ac:ab:fe:b8:8a:6c:37:c6:0c:ee:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 31 01:30:09 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=3800c45886eba2adecefb8cd8241555a1c0d95265ae5e820697e5ca79ed40baf, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:d4:9d:c9:72:af:6b:a8:bb:9b:f5:e4:99:
                    a1:4a:cd:28:06:3d:7f:ab:81:4a:f1:8f:b0:84:6a:
                    cf:72:03:18:f6:40:57:b2:9e:3d:37:58:1c:5c:5e:
                    ce:c3:4f:ce:eb:9e:91:2b:17:16:da:32:10:73:ca:
                    fc:df:56:59:9d:b0:39:a6:bb:00:18:c2:3a:0d:9d:
                    f2:ab:3c:6e:0f:81:a2:50:c3:ce:49:b8:27:ba:19:
                    8e:24:1e:a2:95:36:ab:9e:53:42:09:36:45:7d:60:
                    2f:dd:36:00:7e:6f:8a:5e:e2:41:ee:4c:35:7f:d4:
                    31:84:f8:8b:ee:4a:43:3c:bd:66:1a:2a:89:3b:f2:
                    cb:f5:cb:11:3e:26:99:7e:16:3b:1a:0b:de:16:49:
                    60:c5:14:12:37:d4:ed:dc:e0:ef:e5:f1:a7:00:1f:
                    14:69:16:49:d2:a6:a5:7f:6e:62:13:9e:35:22:25:
                    f7:d5:b8:5e:2c:7e:bf:c8:8c:b1:2d:5e:f4:01:af:
                    ea:f3:c4:59:47:67:e2:f5:0d:c9:14:6e:8e:a8:fc:
                    5d:49:2c:81:86:a2:4d:db:dd:f9:7e:cc:d6:77:0c:
                    37:b6:68:a7:d2:21:82:92:ad:92:41:60:7f:3d:9d:
                    52:7d:7a:39:26:eb:1e:99:95:b0:05:82:f3:1a:bc:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:7B:C1:BE:20:F4:9F:1C:E0:A8:FB:AB:68:B3:BC:00:2B:52:7C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c3c1377b-15a9-4918-8ac4-4abafd31046f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:647::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:19:3b:9b:56:39:a2:c3:62:54:aa:f1:55:c7:7b:82:7e:
         17:8e:e8:7a:31:97:84:1c:7b:ca:71:59:95:c5:7e:10:48:2c:
         26:c6:78:bd:de:a5:e8:8d:29:a3:26:67:67:9f:cf:90:92:9c:
         00:56:30:c5:50:b8:92:e2:a9:18:bc:f3:9b:e6:d0:3b:d0:19:
         23:df:b4:c5:98:11:f6:8e:60:3a:0d:83:71:8c:9e:42:f5:e1:
         ea:db:a2:c6:fd:53:73:8d:7f:07:33:69:28:b9:14:e3:d6:ae:
         6d:eb:61:30:02:b2:1f:1d:5d:e6:85:dc:33:e5:96:31:69:7a:
         01:01:bc:95:f6:55:25:fb:3d:15:f4:01:2b:44:55:46:ba:71:
         6e:5e:a0:07:73:34:42:88:30:e1:5d:98:be:71:e2:bf:98:c9:
         91:6c:0b:32:9b:97:bc:03:3f:ed:08:c7:1d:ed:be:56:4e:31:
         48:27:47:dc:16:1f:04:9e:31:f5:81:13:57:90:71:80:bb:09:
         5e:c7:7c:34:d5:33:9b:03:4a:01:f5:79:b5:fa:f1:32:c9:91:
         46:b5:20:6e:fa:a3:97:ab:a0:c1:ee:7f:6f:88:55:0e:97:c7:
         08:ea:5a:96:b6:d0:b4:4b:a4:b7:f5:88:b3:d6:97:cf:aa:54:
         b3:9b:19:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:02 2025 by rpki-client